Forum Discussion

Jake_Tan_131739's avatar
Jake_Tan_131739
Icon for Nimbostratus rankNimbostratus
Oct 20, 2013

sol13392 Intrusion Detection Clone Pool

Based on configuration in SOL13392 need to add Pool member, which means it should have IP? I would like to check how clone pool works if IDS is using sensor port which do not have IP.

 

4 Replies

  • I would like to check how clone pool works if IDS is using sensor port which do not have IP.

     

    if i do not misremember, it is just used to resolve IDS' mac address.

     

  • That's correct Nitass. Jake, I'd recommend picking a dummy IP address and creating a static ARP entry for it so the F5 can resolve the MAC address.

     

  • Messe's avatar
    Messe
    Icon for Nimbostratus rankNimbostratus

    So what I am missing is what do you put as the MAC address? I am trying to do the same thing with a TAP that would normally off a span port on a switch.